$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa File: d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa (raw, json) Hash identifier: iuz21kT5GeU9kAdUQuTisveqcNspiFuOSHiAOgV8y78= Subject key identifier: 09:37:7D:0B:3D:E5:91:F1:CC:40:EC:B0:D8:23:D9:5A:D2:C8:3D:31 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA786F5BC4052EE6233915140 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 131.186.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f5:bc:40:52:ee:62:33:91:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=85e3f9eb-5bd3-47e6-811d-8c757e8d17b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:92:a2:8b:44:01:71:f5:1b:f0:09:64:d8:bc: fb:1a:34:35:41:f9:37:29:af:74:7a:10:35:9e:98: 07:a9:d0:3b:50:cf:0a:45:7c:6e:52:67:81:60:b8: 40:06:72:7b:32:a9:5a:a6:2c:b9:41:af:89:3c:b6: a4:8b:8e:1d:23:25:21:35:80:38:81:9a:4a:66:36: 80:fb:3d:64:a9:43:84:dc:a7:21:50:8f:51:f7:37: 48:82:5e:22:14:5c:8c:3d:12:0f:01:d7:d9:2e:26: 25:df:7a:9e:15:17:e4:55:57:49:81:41:c5:f0:8b: 35:67:d1:3c:61:96:8f:5d:4d:9e:3e:b7:f5:8c:66: 21:91:7a:6e:1c:e1:75:35:31:27:a7:6a:14:58:4f: bc:dd:4b:c4:c0:e0:c3:1e:76:1f:76:70:7b:96:df: 7f:4d:9e:10:3e:f5:83:80:9a:2a:87:e6:b6:59:ec: a4:1a:67:ef:54:e2:3f:fc:4a:94:87:20:9c:ee:2a: b1:70:7b:c9:e0:15:30:0d:b5:84:fb:68:62:28:3c: 85:7d:93:9b:09:fd:9d:d7:98:39:77:ab:bb:6b:d5: 2a:41:c1:a7:51:07:03:4b:89:62:96:c4:f9:d6:c8: 41:c3:ac:d7:19:4a:85:fc:23:ff:86:e5:06:95:25: bf:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:37:7D:0B:3D:E5:91:F1:CC:40:EC:B0:D8:23:D9:5A:D2:C8:3D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d9dc5b5e-f96d-3f8d-a048-247f0f269121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 131.186.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:06:44:75:28:b2:df:0a:97:7d:c0:51:d9:31:57:6f:84:f0: 7f:f6:26:42:2f:5f:19:66:d3:e8:c4:eb:47:15:60:1d:3b:47: b8:14:b8:1e:11:f7:b3:86:fb:40:32:1c:3e:9a:49:bd:46:81: ac:8d:fc:ac:21:cb:64:e4:36:96:88:90:57:00:ae:98:5a:37: ac:74:40:42:16:49:cc:91:d8:81:04:7b:1b:90:b5:ab:44:80: 1e:ac:30:b6:02:1d:0e:23:7b:24:cb:55:1d:78:21:a2:0f:a6: 3a:12:18:44:59:0a:27:1b:23:e1:2c:67:bc:30:54:ba:e6:13: d1:2a:2c:96:16:57:ed:02:b1:ca:72:c3:9d:58:8f:b8:e9:76: 74:b1:41:fc:dd:49:7e:bc:fd:ff:fd:cd:f9:7b:8a:96:7d:b8: 23:95:43:b0:6a:40:4c:71:7f:2f:33:30:2e:20:24:f7:29:c9: f9:c4:15:b4:c8:b7:5c:27:7a:90:f2:11:cd:94:52:22:5c:ec: be:4e:00:d7:ab:e2:0e:78:94:b8:4b:f8:4b:9f:c7:89:48:8d: 6d:97:69:ca:0e:0d:2a:88:e9:25:a1:0e:13:7e:d2:b5:8d:ec: 0e:9f:04:33:8c:4c:ed:b2:08:99:c7:a0:ff:44:97:fe:71:4f: 2a:59:40:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvW8QFLuYjORUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODVlM2Y5ZWItNWJkMy00N2U2LTgxMWQtOGM3NTdlOGQxN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpKii0QBcfUb8Alk2Lz7GjQ1Qfk3Ka90ehA1 npgHqdA7UM8KRXxuUmeBYLhABnJ7Mqlapiy5Qa+JPLaki44dIyUhNYA4gZpKZjaA +z1kqUOE3KchUI9R9zdIgl4iFFyMPRIPAdfZLiYl33qeFRfkVVdJgUHF8Is1Z9E8 YZaPXU2ePrf1jGYhkXpuHOF1NTEnp2oUWE+83UvEwODDHnYfdnB7lt9/TZ4QPvWD gJoqh+a2WeykGmfvVOI//EqUhyCc7iqxcHvJ4BUwDbWE+2hiKDyFfZObCf2d15g5 d6u7a9UqQcGnUQcDS4lilsT51shBw6zXGUqF/CP/huUGlSW/rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk3fQs95ZHxzEDssNgj2VrSyD0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDlkYzViNWUtZjk2ZC0z ZjhkLWEwNDgtMjQ3ZjBmMjY5MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg7psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4GRHUost8Kl33AUdkxV2+E8H/2JkIvXxlm0+jE60cVYB07R7gUuB4R 97OG+0AyHD6aSb1GgayN/Kwhy2TkNpaIkFcArphaN6x0QEIWScyR2IEEexuQtatE gB6sMLYCHQ4jeyTLVR14IaIPpjoSGERZCicbI+EsZ7wwVLrmE9EqLJYWV+0Cscpy w51Yj7jpdnSxQfzdSX68/f/9zfl7ipZ9uCOVQ7BqQExxfy8zMC4gJPcpyfnEFbTI t1wnepDyEc2UUiJc7L5OANer4g54lLhL+Eufx4lIjW2XacoODSqI6SWhDhN+0rWN 7A6fBDOMTO2yCJnHoP9El/5xTypZQOA= -----END CERTIFICATE-----Generated at Thu Aug 27 11:33:49 2026 by rpki-client